Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-113308 | 8.8 high | 0.00% | google, chrome | Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 21 Oct |
| CVE-2026-113311 | 8.8 high | 0.00% | google, chrome | Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 21 Oct |
| CVE-2026-113313 | 8.8 high | 0.00% | google, chrome | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) | 21 Oct |
| CVE-2026-113314 | 8.8 high | 0.00% | google, chrome | Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) | 21 Oct |
| CVE-2026-113315 | 8.8 high | 0.00% | google, chrome | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 21 Oct |
| CVE-2026-113316 | 8.8 high | 0.00% | google, chrome | Improper input validation in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 21 Oct |
| CVE-2026-113318 | 8.8 high | 0.00% | google, chrome | Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 21 Oct |
| CVE-2026-113319 | 8.8 high | 0.00% | google, chrome | Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 21 Oct |
| CVE-2026-113321 | 8.8 high | 0.00% | google, chrome | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 21 Oct |
| CVE-2026-113324 | 8.8 high | 0.00% | google, chrome | Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 21 Oct |
| CVE-2026-113327 | 8.8 high | 0.00% | google, chrome | Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 21 Oct |
| CVE-2026-113332 | 8.8 high | 0.00% | google, chrome | Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 21 Oct |
| CVE-2026-113335 | 8.8 high | 0.00% | google, chrome | Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 21 Oct |
| CVE-2026-113337 | 8.8 high | 0.00% | google, chrome | Memory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 21 Oct |
| CVE-2026-113338 | 8.8 high | 0.00% | google, chrome | Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 21 Oct |
| CVE-2026-113339 | 8.8 high | 0.00% | google, chrome | Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 21 Oct |
| CVE-2026-113343 | 8.8 high | 0.00% | google, chrome | Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 21 Oct |
| CVE-2026-113124 | 8.8 high | 0.00% | google, chrome | Memory corruption in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 21 Oct |
| CVE-2026-113125 | 8.8 high | 0.00% | google, chrome | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) | 21 Oct |
| CVE-2026-113137 | 8.8 high | 0.00% | google, chrome | Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 21 Oct |
| CVE-2026-113128 | 8.8 high | 0.00% | google, chrome | Missing authorization in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) | 21 Oct |
| CVE-2026-113130 | 8.8 high | 0.00% | google, chrome | Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) | 21 Oct |
| CVE-2026-113131 | 8.8 high | 0.00% | google, chrome | Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 21 Oct |
| CVE-2026-113132 | 8.8 high | 0.00% | google, chrome | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) | 21 Oct |
| CVE-2026-113133 | 8.8 high | 0.00% | google, chrome | Memory corruption in PlatformIntegration in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 21 Oct |
| CVE-2026-113135 | 8.8 high | 0.00% | google, chrome | Memory corruption in PictureInPicture in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 21 Oct |
| CVE-2026-113136 | 8.8 high | 0.00% | google, chrome | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 21 Oct |
| CVE-2026-113170 | 8.8 high | 0.00% | no CPE yet | Use after free in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 21 Oct |
| CVE-2026-113180 | 8.8 high | 0.00% | no CPE yet | Memory corruption in ContentCapture in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) | 21 Oct |
| CVE-2026-110919 | 8.8 high | 0.00% | google, chrome | Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 19 Oct |
| CVE-2026-110920 | 8.8 high | 0.00% | google, chrome | Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 19 Oct |
| CVE-2026-110921 | 8.8 high | 0.00% | google, chrome | Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 19 Oct |
| CVE-2026-110913 | 8.8 high | 0.00% | google, chrome | Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 19 Oct |
| CVE-2026-110914 | 8.8 high | 0.00% | google, chrome | Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 19 Oct |
| CVE-2026-110915 | 8.8 high | 0.00% | google, chrome | Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 19 Oct |
| CVE-2026-76017 | 8.8 high | 0.00% | google, chrome | Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical) | 18 Oct |
| CVE-2026-76018 | 8.8 high | 0.00% | google, chrome | Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. (Chromium security severity: High) | 18 Oct |
| CVE-2026-76021 | 8.8 high | 0.00% | google, chrome | Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 18 Oct |
| CVE-2026-76022 | 8.8 high | 0.00% | google, chrome | Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | 18 Oct |
| CVE-2026-76023 | 8.8 high | 0.00% | google, chrome | Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | 18 Oct |
| CVE-2026-110172 | 8.8 high | 0.00% | google, chrome | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 15 Oct |
| CVE-2026-110171 | 8.8 high | 0.00% | google, chrome | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 15 Oct |
| CVE-2026-110169 | 8.8 high | 0.00% | google, chrome | Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 15 Oct |
| CVE-2026-110168 | 8.8 high | 0.00% | google, chrome | Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 15 Oct |
| CVE-2026-110167 | 8.8 high | 0.00% | google, chrome | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 15 Oct |
| CVE-2026-110166 | 8.8 high | 0.00% | google, chrome | Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 15 Oct |
| CVE-2026-110164 | 8.8 high | 0.00% | google, chrome | Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 15 Oct |
| CVE-2026-110163 | 8.8 high | 0.00% | google, chrome | Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 15 Oct |
| CVE-2026-110162 | 8.8 high | 0.00% | google, chrome | Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 15 Oct |
| CVE-2026-110157 | 8.8 high | 0.00% | google, chrome | Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 15 Oct |
Download these 1000 as CSV (the first thousand in this order) · subscribe to this list.
EPSS scores: 2026-10-31. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.